Edmund M. Clarke Proving Correctness of Coroutines Without History Variables. 169-188 1980 13 Acta Inf. db/journals/acta/acta13.html#Clarke80